PT-2024-27820 · Go-Git+1 · Go-Git+1
Adamkorcz
·
Published
2024-06-18
·
Updated
2024-06-28
·
CVE-2024-37904
CVSS v3.1
5.7
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Minder versions prior to v0.0.52
Description
Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users' repositories using the
github.com/go-git/go-git/v5 library. The (g *Git) Clone() method is vulnerable to a DoS attack: a Minder user can instruct Minder to clone a large repository, which will exhaust memory and crash the Minder server. The root cause of this vulnerability is a combination of the following conditions:- Users can control the Git URL which Minder clones.
- Minder does not enforce a size limit to the repository.
- Minder clones the entire repository into memory.
Recommendations
To resolve the issue, upgrade to release version v0.0.52 or later.
As a temporary workaround, consider restricting the size of repositories that can be cloned by Minder to prevent memory exhaustion.
Avoid using the
github.com/go-git/go-git/v5 library to clone large repositories until the issue is resolved.Exploit
Fix
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Minder
Go-Git